Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vH8szw787Y9qTzS4-kvyjLP6eCw.roa
File: vH8szw787Y9qTzS4-kvyjLP6eCw.roa (raw, json)
Hash identifier: 3gj4R8yDLiy3mTxOfJC2beYFKzmAgKpTdJmxEosLpz4=
Subject key identifier: BC:7F:2C:CF:0E:FC:ED:8F:6A:4F:34:B8:FA:4B:F2:8C:B3:FA:78:2C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD732D43D573FA8A29915B3598C185449
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vH8szw787Y9qTzS4-kvyjLP6eCw.roa
Signing time: Wed 27 Sep 2023 15:12:27 +0000
ROA not before: Wed 27 Sep 2023 15:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:32:d4:3d:57:3f:a8:a2:99:15:b3:59:8c:18:54:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 15:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc7f2ccf0efced8f6a4f34b8fa4bf28cb3fa782c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:6d:2a:8b:03:16:ce:12:71:2a:42:f4:c6:
7f:87:8a:a3:d6:c1:38:10:f0:40:c5:1c:b0:b2:04:
aa:7b:96:a0:c7:97:9e:d8:53:07:73:63:39:24:07:
0e:93:87:21:de:d9:a7:29:58:7d:e6:98:94:7a:c3:
8c:4e:41:08:c9:88:0b:cb:30:a6:02:9d:60:25:70:
48:b5:59:be:91:6f:8a:ba:0f:1b:00:e5:e7:08:17:
33:e1:28:59:df:da:8c:7c:f3:70:fc:bb:94:16:4e:
46:dc:28:dd:9c:ca:cf:37:fe:74:fb:a3:c5:a2:ac:
4f:c7:9e:5a:43:4a:fe:d6:2f:70:76:39:dc:f4:a9:
78:be:84:df:8f:3b:00:21:7c:60:7f:a5:74:af:06:
3e:80:c2:e5:6e:bd:2a:2d:72:b8:0e:df:43:cf:3f:
25:8a:a0:a5:32:b4:7d:8d:9f:f6:d2:6c:b9:36:26:
ce:af:94:8f:56:61:21:50:62:a5:42:d5:d4:53:20:
fc:b2:75:5b:4f:33:c2:a3:e4:f5:6f:ad:b8:9e:ad:
dc:1c:52:73:15:c0:44:ec:a2:a5:6b:5c:09:48:76:
4e:13:a5:1f:b3:cf:9f:44:9b:96:4f:29:a1:8c:c1:
4c:ee:3d:6e:3a:1e:31:f2:0d:61:1c:43:87:78:52:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7F:2C:CF:0E:FC:ED:8F:6A:4F:34:B8:FA:4B:F2:8C:B3:FA:78:2C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vH8szw787Y9qTzS4-kvyjLP6eCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:f0:52:14:c6:a2:bc:6a:c3:e0:96:88:34:f2:46:ce:80:02:
3a:ba:3e:d2:03:ad:41:59:c5:3a:05:bc:9c:5e:e4:92:8b:13:
50:25:d7:e4:af:c3:0f:ef:7b:e9:5b:37:9f:57:ee:65:af:13:
07:d6:9b:a2:42:10:55:98:fc:c5:44:66:87:89:9f:bb:e1:24:
ac:30:68:a4:b4:15:2a:57:61:31:c7:59:55:21:f0:90:1a:8c:
77:58:1a:a7:5e:49:09:95:28:f4:df:cf:b2:46:48:9d:31:a4:
45:ea:da:3e:eb:13:a3:cf:1d:1e:b7:13:90:f5:52:07:38:e8:
75:ae:37:66:0e:b8:32:21:d0:49:cd:06:0b:c5:fb:99:04:e0:
fd:2c:8a:c9:48:ea:c6:10:4f:ac:d9:c0:9b:01:ee:1f:f6:3b:
55:33:46:b1:f5:3f:8e:56:1c:89:43:20:35:10:d0:df:7d:2d:
86:42:34:77:eb:c3:59:26:8c:9b:4b:4c:3a:51:fe:5c:40:d1:
64:8d:79:75:aa:92:df:5c:e0:4d:10:bb:3f:ba:c6:86:4b:57:
53:20:1d:48:45:8c:6d:96:6f:3d:73:a7:3c:28:db:51:1b:84:
53:f1:4d:48:69:f4:7b:64:38:fc:df:79:98:ed:39:39:28:ae:
61:73:96:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:20 2025 by rpki-client